topic Re: External RADIUS attributes for MAC authentication in Wireless

External RADIUS attributes for MAC authentication

joan.porta — Sun, 04 Jul 2021 19:26:05 GMT

Hi all,

We have a 1231 AP and a Freeradius Server.

Now we are using MAc authentication.

The thing is that the AP sends two parameters to the RADIUS:

User-Name = "000ff855df2e"

User-Password = "000ff855df2e"

both are the MAC of the wireless client.

I want that the AP send:

User-Name = "00-0f-f8-55-df-2e"

User-Password = "mykey"

Note that the MAC is dash separated and

the passwod is forced to the key that I want.

Thank you

Re: External RADIUS attributes for MAC authentication

gmercuri — Thu, 22 Jun 2006 15:09:36 GMT

The MAC addresss parameters sent by the AP have limited format. Both the user name and password have to be the same. However, the format can be configured via the CLI as shown here.

AP(config)#dot11 aaa csid ?

default format ex: 0000.4096.3e4a

ietf format ex: 00-00-40-96-3e-4a

unformatted format ex: 000040963e4a

External RADIUS attributes for MAC authentication

jorgecorrales1 — Thu, 22 Dec 2011 16:33:33 GMT

It does not work becuase the command does not change user-name attribute format. I wonder if someone has found an answer for this, because I have the very same problem.